Don't be too quick to blaim the retailer with a credit card security breach...I am not saying it's not possible but our own mail order auto company was visited by a HSBC anti-fraud agent who blaimed us for a security breach on our website, it appears that we were the common purchase point on 28 cards that were subsequently defrauded,this was 28 cards on 19000 transactions. He wanted me to spend £8000 a day with HSBC's recommended forensic internet investigator,the work would have been 3-4 days,not a small sum for a small company. I investigated these defrauded cards more thoroughly and found that they were mostly located in Finland,Austria and Portugal, I also found out that HSBC's processing centre in Spain had been hacked and banks in Finland,Austria and Portugal had found it necessary to replace all cards that had been processed through the HSBC centre. I pointed this out to the HSBC agent,who previously had told me that HSBC were hack-proof,when I told him about the HSBC centre security breach he said he knew nothing about it,I found that hard to believe. Strange that after that the agent never returned and he lost interest in pushing the forensic investigation work! I tell this story in full because I am sure that the retailer is very worried,as I was and my website contractor. We investigated the coding in our website and could find absolutely no evidence of a breach in our encription. These banks are not hack-proof, during my problem an internet search revealed many security breaches of the bank's systems,not just HSBC so don't 100% blaim the retailer. The banks will always blaim the retailer and threaten big fines if the retailer is persuaded he is at fault but often their own house is not watertight.